$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft File: opAORlWrNJpGMrFAcZ3JcjBDFyU.mft (raw, json) Hash identifier: /WlZy9Z0h8d5s1zXNzsi7GMZMQqH5n3Bnejbke+0GfI= Subject key identifier: D0:D5:FE:35:E9:93:AD:DE:E5:16:92:63:EC:E4:BB:C3:42:A5:DA:C2 Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725 Certificate serial: 019D37F70CEC7829E35247AEEA89C9909F14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft Manifest number: 18A7 Signing time: Sun 29 Mar 2026 05:00:30 +0000 Manifest this update: Sun 29 Mar 2026 05:00:30 +0000 Manifest next update: Mon 30 Mar 2026 05:00:30 +0000 Files and hashes: 1: 0ub9OUDvq-GTk6vbG0qa7XcgLqo.roa (hash: VMePWqYKWwHlm0UpLz+l5ddrcipvR5l3jj4E/ERuLCs=) 2: FRNi3sk0ZONfKtQJpcFEsCtLeHc.roa (hash: 7YUc6wfgN+sYhdx1cpmGPpDGVuugRkWqHt6/wHp1CDk=) 3: FYi2op6EKF00E1GgCH9P1pwsWKA.roa (hash: SVnGJLKooRqonEdOpAassNIuL9GssfXn7HsbxdU+WUA=) 4: FbAKxqRl7b3MkUokRiA1JVNFWl0.roa (hash: LKX3SQX6NsbnTwa6NWn9h4EDhbC8QTDK/pl40mYXBaI=) 5: HkwuJu9io020PbxRWDFjsBLDBY0.roa (hash: 54qGpDCHJR33ZIOHfgUlFjHcaUi+BAqkWs7Zaq0wwz8=) 6: L-To8dTceN5xxbEJ2QWl3_lVx0Y.roa (hash: VwojFWUhMCERU0Ki7bA5wqTbNgVL6QvW7R1KnsktuYI=) 7: RUdkYB7gYtQia_NavoRTMoG3pvE.roa (hash: T6PW2Xl5c1A8FrzU6sJtHxxL5BTjblBQGY54ZziHyw0=) 8: VQsDH7SGd5hal_nlNR8i5lyIdTU.asa (hash: CUgzrAYaMR8T7BZPdashoUewG1Aed1T1TxeGji8a5Ac=) 9: cv77Irhy5dPJnyDB6jtQBBErfyI.roa (hash: TFMqYf00E8OIGlevPHCz73zJ5wru7ob9Ok+KkCgVHW0=) 10: opAORlWrNJpGMrFAcZ3JcjBDFyU.crl (hash: kwxH4NH81cPl5X1W1n0LXVtD7kAW5fyNcduAOpAF6FE=) 11: tDIPyCeJ6lwABqJN9BvBHe0hGng.roa (hash: Ct8rOWY/RQns6Y0hISopyHYEG2NvtwUoOdKLUr3Niy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 30 Mar 2026 05:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:37:f7:0c:ec:78:29:e3:52:47:ae:ea:89:c9:90:9f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2900e4655ab349a4632b140719dc97230431725 Validity Not Before: Mar 29 05:00:30 2026 GMT Not After : Mar 30 05:00:30 2026 GMT Subject: CN=d0d5fe35e993addee5169263ece4bbc342a5dac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b5:46:c3:16:2a:80:37:08:37:b8:aa:71:34: b6:3d:1a:9a:0b:79:3a:3c:db:65:73:03:4e:20:34: 2c:df:4a:23:5c:c1:57:1e:ad:b9:77:86:7e:13:38: 47:e7:f4:d0:bb:dc:6e:33:45:81:f7:c7:06:c3:83: 22:45:9b:a4:0e:98:c6:5c:5b:9a:db:b8:5f:de:dd: 30:ec:9e:46:da:8e:e3:25:e7:84:65:a5:28:05:7c: a8:34:22:31:66:3e:89:05:fa:3b:07:77:f3:8e:00: 55:3c:a5:78:84:c7:79:e1:92:74:c3:26:7f:81:b1: ae:66:af:f9:e7:e9:a4:8d:6f:c9:93:fd:ca:69:79: 83:75:71:c7:11:96:9e:49:9e:d6:a4:60:22:f0:73: a4:21:71:4a:93:a1:4e:94:62:da:be:6c:0b:32:5d: fe:02:61:8e:cd:d9:a8:80:71:7b:78:30:ed:fa:5a: cf:97:66:f7:f6:72:9b:6a:ab:88:25:4e:7a:e7:60: 6b:73:55:55:6c:59:67:b3:b4:0f:91:f7:4e:33:ed: 63:1e:8d:1c:42:08:5f:42:d9:88:14:4f:a4:0c:29: 4c:bc:b6:85:9d:4b:33:09:c4:69:da:8e:b1:15:b8: da:04:31:eb:1b:2a:9f:a8:55:db:de:b7:fc:60:59: e3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D5:FE:35:E9:93:AD:DE:E5:16:92:63:EC:E4:BB:C3:42:A5:DA:C2 X509v3 Authority Key Identifier: keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:b3:06:69:c5:f0:75:12:4d:2d:7b:6e:c6:ca:75:ea:76:91: b6:bf:de:dc:9e:4b:72:f6:8e:6d:7e:05:f1:e2:0c:14:5b:b5: 8e:60:7e:09:30:55:64:82:e9:a5:12:dd:a8:58:1e:60:34:5c: 0e:5c:2f:54:bd:ce:a2:8d:d6:50:45:69:05:a8:69:27:4a:a2: 70:2e:a0:56:24:f9:ca:0f:89:f4:15:df:83:e2:95:26:e0:eb: 6a:cf:ac:a4:69:c3:45:9b:4f:fe:15:55:93:17:55:9a:89:48: 7e:33:73:f8:97:d7:e8:d4:ce:07:66:27:90:98:20:28:a5:74: 51:ea:18:39:2c:d8:d6:8f:90:55:4d:13:68:36:99:7a:0f:df: c5:bc:e7:68:b3:6e:dc:27:ff:65:b7:98:6f:07:16:a8:61:20: 6e:88:f9:f5:98:fe:1b:33:8d:58:53:99:ba:51:8f:e7:06:ad: 89:ba:e1:fb:c1:91:63:18:c7:8c:27:f9:b5:63:05:60:e3:cb: 4d:03:32:2b:cf:b2:5d:5b:70:79:3e:40:c1:6e:02:06:3c:38: a0:7a:3a:23:ee:ea:8c:5a:37:bd:86:02:f0:c6:71:97:7b:a1: 52:68:0c:88:15:0c:e4:2a:c0:0a:84:25:11:88:4a:bd:6c:9d: 03:6f:a8:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ039wzseCnjUkeu6onJkJ8UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyOTAwZTQ2NTVhYjM0OWE0NjMyYjE0MDcxOWRjOTcyMzA0 MzE3MjUwHhcNMjYwMzI5MDUwMDMwWhcNMjYwMzMwMDUwMDMwWjAzMTEwLwYDVQQD EyhkMGQ1ZmUzNWU5OTNhZGRlZTUxNjkyNjNlY2U0YmJjMzQyYTVkYWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLVGwxYqgDcIN7iqcTS2PRqaC3k6 PNtlcwNOIDQs30ojXMFXHq25d4Z+EzhH5/TQu9xuM0WB98cGw4MiRZukDpjGXFua 27hf3t0w7J5G2o7jJeeEZaUoBXyoNCIxZj6JBfo7B3fzjgBVPKV4hMd54ZJ0wyZ/ gbGuZq/55+mkjW/Jk/3KaXmDdXHHEZaeSZ7WpGAi8HOkIXFKk6FOlGLavmwLMl3+ AmGOzdmogHF7eDDt+lrPl2b39nKbaquIJU5652Brc1VVbFlns7QPkfdOM+1jHo0c QghfQtmIFE+kDClMvLaFnUszCcRp2o6xFbjaBDHrGyqfqFXb3rf8YFnjdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNDV/jXpk63e5RaSY+zku8NCpdrCMB8GA1UdIwQY MBaAFKKQDkZVqzSaRjKxQHGdyXIwQxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt ZjRjNWZjM2NhMmM0LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0 LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhLMGacXw dRJNLXtuxsp16naRtr/e3J5LcvaObX4F8eIMFFu1jmB+CTBVZILppRLdqFgeYDRc DlwvVL3Ooo3WUEVpBahpJ0qicC6gViT5yg+J9BXfg+KVJuDras+spGnDRZtP/hVV kxdVmolIfjNz+JfX6NTOB2YnkJggKKV0UeoYOSzY1o+QVU0TaDaZeg/fxbznaLNu 3Cf/ZbeYbwcWqGEgboj59Zj+GzONWFOZulGP5watibrh+8GRYxjHjCf5tWMFYOPL TQMyK8+yXVtweT5AwW4CBjw4oHo6I+7qjFo3vYYC8MZxl3uhUmgMiBUM5CrACoQl EYhKvWydA2+oNg== -----END CERTIFICATE-----Generated at Sun Mar 29 11:17:38 2026 by rpki-client